Skip to content

CVE-2026-16306 CVE-2026-16306

CriticalCVSS 9.8 EPSS 0.68%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Remote Code Execution in the IModular.exe URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted imodular:// URI containing attacker-controlled command and argument parameters.

Affected products

ProductAffected versionsFixed in
INFINITT Healthcare System Manager >= 3.0.11.3, <= 3.0.11.5 No fix listed

References